Trumis / Privacy

Privacy Policy

Last updated: 26 July 2026

Your device copy and the encrypted service record

The conversation, the facts it establishes, draft complaints and response clocks are saved in your browser's local storage so you can close the page and come back. Each processed turn is also retained by Trumis as an encrypted intake record for up to 24 months. Deleting in the app removes the device copy; it does not itself delete the service record. Contact info@trumis.com.au for an access or deletion request.

Because everything lives in the browser, anyone using the same browser profile on the same device could reopen it. On a shared or public computer — a library, a kiosk, an agency office — delete the conversation when you finish.

Each turn is processed and retained

Each time you send a message, your browser sends the visible transcript of that conversation (plus the facts confirmed so far) to our server, which works out the reply and returns it. The request and response—including the conversation, structured facts, extracted evidence text, generated documents and routing—are encrypted and retained with a random intake identifier. Authentication credentials and payment secrets are not placed in the intake record.

For the conversational layer, the transcript is also passed to our AI provider (Anthropic or OpenAI) for processing on their servers, which may be located overseas — typically in the United States. Both providers state that data submitted through their business APIs is not used to train their models. Whether a complaint has grounds is never decided by the AI model: that decision is made by our own deterministic rules engine.

If you use voice input (the Talk button), your device records a short audio clip while you hold the button and sends it to our AI provider's transcription service (OpenAI), which turns it into text and detects the language automatically so any language works. The audio is transcribed and discarded — it is not stored by Trumis or, per the provider's business-API terms, used to train their models. From that point the recognised text is treated exactly like something you typed: you review it before it is sent.

Anonymous complaint statistics

When you confirm that a written complaint from a partner organisation's page has been sent, Trumis records an anonymous category profile of it, so that rising kinds of complaint are visible to us and to the organisations that need to fix them: the type of dispute, the legal grounds that were established, the urgency level, the industry — and the organisation complained about when it is one of the verified organisations in our directory — recorded against the calendar day.

These statistics contain nothing about you and nothing you wrote. A short-lived, signed lodgement token held by the browser is used to prevent drafts being counted before the send confirmation; it contains category codes only and expires after 90 days. The database they go to has no column that can hold free text — your words, your name and your story cannot be stored there by design. There is no identifier linking a profile to you, your device, or your conversation, and nothing finer than the calendar day is recorded. Statistics shown to organisations are aggregates and never show groups smaller than five complaints. The full technical design is public in our repository, and the store is described on the Security page.

Screenshots are read on your device

When you attach screenshots of chats, emails or letters as evidence, the images are read on your device, in your browser. The images are never uploaded. Only the recognised text and its position on screen are sent to our server, which reconstructs the correspondence (who said what, and when) and returns it to you for review. The approved reconstructed text is retained with the intake; the raw image is not. The reconstructed record becomes part of your complaint only after you approve it.

Sending your complaint

Trumis addresses your complaint, but you send it — from your own email account or through the receiver's own complaint form. Trumis retains the generated complaint in the encrypted intake record but does not send it for you. Response tracking (clocks, overdue flags) runs on your device. The receiving organisation's own privacy policy governs what happens to your complaint after they receive it.

If you use Trumis on an organisation's page

Organisations can embed Trumis on their own complaints pages. The widget works like the app on this site: the conversation remains in your browser and an encrypted service record is retained by Trumis for up to 24 months. The organisation receives only the complaint you explicitly approve and send, and the widget shows you where it will go before you send it. What the organisation does with a complaint after receiving it is governed by its own privacy policy.

No payments from individuals

Trumis asks individuals for no payment details, at any point, so there is nothing to say about card handling: no payment page, no session reference, no payment records. If Trumis points you to FairClaim for a formal complaint, you leave Trumis to do that, and FairClaim's own privacy policy applies from there. Donations, which are entirely optional and unrelated to any complaint, are handled by Stripe on Stripe's own hosted page — card details never touch Trumis servers.

Hosting, logs and email

Trumis is hosted on Vercel and served from Australia. Like almost all hosting providers, Vercel keeps short-lived technical access logs (such as IP address and request time) for security and reliability; we do not use these to identify or profile anyone. Our servers also keep transient, in-memory request counters to enforce fair-use rate limits — these are not written to storage. If you email us, we keep the correspondence for as long as needed to deal with it.

Advertising measurement on marketing pages

Marketing pages — the homepage, guides, pricing and other informational pages — load the Google tag (gtag.js) for Google Ads conversion measurement. It may set cookies and sends page-visit data (such as the page URL and a browser identifier) to Google so we can tell which advertising brings people here. The same pages also use Vercel Web Analytics, a cookieless page-view counter served from our own domain: it records aggregate visits and referrers, sets no cookies, and does not track you across sites. The complaint companion at /app/ carries no tracking whatsoever — no Google tag, no analytics, no ad cookies. Your conversation and complaint are never visible to any advertising or analytics service. You can block the marketing-page tags with any content blocker without affecting how Trumis works, and opt out of Google's personalisation at adssettings.google.com.

What we don't do

No third-party trackers or analytics inside the complaint companion, no sale or sharing of personal information, no profiles, and no accounts. We collect as little as possible on purpose — information we never hold is information that can never leak.

Your choices and rights

In this policy, “Trumis”, “we” and “us” mean Trumis Pty Ltd (ABN 17 691 704 677), Victoria, Australia — the operator of this service.

You can remove everything Trumis knows on your device by deleting the conversation in the app or clearing the site's data in your browser. We aim to handle information consistently with the Australian Privacy Principles under the Privacy Act 1988 (Cth), including APP 8 for the overseas processing described above, regardless of whether the Act formally applies to a service of this size.

Questions, or a concern about how something was handled? Email info@trumis.com.au. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes to this policy

If a data flow changes, this page changes with it, and the date at the top is updated. Significant changes will be flagged on the home page.